Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/YWx5LPUxWjVFqacvQPPS5X0JnQo.roa
File: YWx5LPUxWjVFqacvQPPS5X0JnQo.roa (raw, json)
Hash identifier: tQhWNjB+Ou6m9KvKR4e5W4hPzK0Vwe1hIf4sW/iHBAo=
Subject key identifier: 61:6C:79:2C:F5:31:5A:35:45:A9:A7:2F:40:F3:D2:E5:7D:09:9D:0A
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: 0194258EF64B72809ACE974A2A4577CC3B97
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/YWx5LPUxWjVFqacvQPPS5X0JnQo.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208171
IP address blocks: 185.224.30.0/24 maxlen: 24
2a12:8d40:1024::/48 maxlen: 48
2a12:8d40:2022::/48 maxlen: 48
2a12:8d40:4096::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f6:4b:72:80:9a:ce:97:4a:2a:45:77:cc:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=616c792cf5315a3545a9a72f40f3d2e57d099d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:2c:3d:88:71:91:69:d2:63:cc:67:da:ff:
67:9c:fb:b3:08:f6:2f:fc:74:f2:30:ce:9a:44:b5:
89:6c:a1:34:3e:0d:4c:2f:54:4f:57:0b:4a:76:35:
2d:90:3d:a9:b2:02:e1:fb:4b:eb:46:ec:78:8e:dc:
41:5c:e5:87:36:56:d9:98:2a:fe:0b:9f:41:55:14:
06:70:cc:7d:2e:84:2c:ba:0f:bb:ec:16:d3:0d:ce:
cc:3d:5d:fe:9c:d9:ed:d1:33:de:b6:f5:f7:84:36:
c4:5d:c3:7a:36:69:08:14:9e:df:6a:23:84:b5:c1:
b6:02:ea:72:04:d9:dc:9f:94:2a:1b:02:d7:66:5f:
1d:2c:05:86:f7:6d:72:05:e6:33:3e:b1:7c:b0:23:
95:04:4a:82:00:72:52:33:bb:d7:7b:51:4f:07:24:
13:dc:6f:0f:5e:e0:4e:2c:d0:d0:90:e5:0d:a3:5a:
20:ad:31:08:98:91:b6:4d:6f:af:08:ba:a5:9f:f0:
95:88:7a:d9:62:87:90:f0:e3:90:8c:1d:d5:ed:bc:
51:3e:7c:8d:54:37:00:a9:06:57:37:02:e5:88:4d:
ba:1f:10:ca:a5:80:69:ac:80:d8:c0:3d:80:14:e5:
5a:b0:93:fb:c5:6f:99:db:f8:13:e9:7a:43:03:5f:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6C:79:2C:F5:31:5A:35:45:A9:A7:2F:40:F3:D2:E5:7D:09:9D:0A
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/YWx5LPUxWjVFqacvQPPS5X0JnQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.30.0/24
IPv6:
2a12:8d40:1024::/48
2a12:8d40:2022::/48
2a12:8d40:4096::/48
Signature Algorithm: sha256WithRSAEncryption
5d:63:bf:60:79:e6:e2:fa:b5:2c:4c:20:14:4f:92:16:64:d2:
18:3f:67:05:68:1e:7c:b9:c5:ea:e4:34:e9:07:9c:1e:e3:e7:
eb:b2:65:57:9e:8a:db:0e:d6:28:ca:df:93:8f:b6:6a:ee:bf:
0f:29:dd:54:a0:5a:98:b9:bd:08:08:88:4d:bd:b5:c3:dc:42:
df:0f:1d:f2:92:39:4a:fe:d2:d3:de:96:2a:19:4b:09:97:26:
08:c5:c6:2d:07:18:b3:bc:03:10:0c:77:68:a3:a8:38:7d:e8:
16:f9:8f:10:81:89:ea:4d:b1:b2:40:e6:67:56:51:25:30:e6:
f1:1f:53:58:e3:6b:7d:cd:66:53:88:43:f2:3f:a4:22:46:20:
b6:a0:4c:a8:30:8d:6b:9d:f5:a6:d8:fa:74:4d:23:ac:4f:32:
dc:55:3c:15:23:8c:99:0a:13:13:fc:1f:b2:b7:78:78:d3:5e:
71:ae:5c:62:d6:4d:6f:3c:69:ae:ac:03:fc:5a:6b:e0:aa:60:
ff:53:60:1b:aa:2b:6a:9e:42:c9:6a:b5:73:73:f8:da:67:98:
21:2e:cd:d8:63:4b:e0:59:a0:57:37:61:5f:a8:4d:d1:4d:98:
59:4d:8d:9d:b3:bb:cb:b9:b8:3e:bc:4c:d4:b2:d6:11:ed:85:
22:89:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:27 2025 by rpki-client